Oracle Applications Framework vulnerabilities

14 known vulnerabilities in Oracle Applications Framework from Oracle. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Oracle Applications Framework: Cross-Site Request Forgery

  CVE-2026-87408Oct 20, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-83332Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle Applications Framework: Improper Privilege Management

  CVE-2026-83331Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle Applications Framework: Improper Privilege Management

  CVE-2026-83329Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.2 High severity

  Oracle Applications Framework: Improper Privilege Management

  CVE-2026-83328Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access vi

• 9.8 Critical severity

  Oracle Applications Framework: Improper Authentication

  CVE-2026-83327Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 8.8 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-83205Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-83072Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 9.1 Critical severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-62546Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via

• 8.8 High severity

  Oracle Applications Framework: Improper Privilege Management

  CVE-2026-62534Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60774Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 8.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60768Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access vi

• 8.8 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60676Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

• 8.8 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60675Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT